Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7B0258785B876E9529605F2A6704AA3FFDC799B0.cer
File:                     7B0258785B876E9529605F2A6704AA3FFDC799B0.cer (raw, json)
Hash identifier:          11/gw7N3fjXiX2G0W13U+2nVcpfDp+2omvfiXhr2YHQ=
Subject key identifier:   7B:02:58:78:5B:87:6E:95:29:60:5F:2A:67:04:AA:3F:FD:C7:99:B0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       12FF535281050C922660E6A01911B488CDA90279
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/7B0258785B876E9529605F2A6704AA3FFDC799B0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 30 Jul 2022 06:25:20 +0000
Certificate not after:    Sat 29 Jul 2023 06:30:20 +0000
Subordinate resources:    AS: 270910
                          IP: 138.121.164.0/22
                          IP: 2804:735c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ff:53:52:81:05:0c:92:26:60:e6:a0:19:11:b4:88:cd:a9:02:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 30 06:25:20 2022 GMT
            Not After : Jul 29 06:30:20 2023 GMT
        Subject: CN=7B0258785B876E9529605F2A6704AA3FFDC799B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:dd:c1:df:46:d0:ef:40:92:42:f6:a9:fa:f7:
                    80:32:77:dc:35:be:9c:cd:3c:48:2d:f2:76:9e:55:
                    a7:ba:82:f5:a1:7e:bd:9d:83:c6:6c:3c:f3:22:e8:
                    a5:8e:11:78:c9:18:cb:6a:d2:2d:e3:cc:99:3f:1e:
                    d2:5b:41:3d:a9:d4:87:a2:42:dd:6a:99:c7:54:b8:
                    0a:79:e1:5a:06:38:e2:5c:cb:44:58:37:c9:09:6b:
                    cb:02:f0:d2:ad:ff:75:d5:60:d9:c1:7e:dc:4a:3a:
                    ce:fb:cd:4d:88:9a:a8:d8:82:1d:29:50:4d:ed:cd:
                    4b:b3:ff:41:82:e6:cf:f7:82:6a:97:1c:9b:ac:6b:
                    27:6e:67:1c:b6:32:17:0e:a6:c5:57:09:54:a6:89:
                    00:83:03:58:43:9e:73:7f:90:0c:1a:97:74:57:d9:
                    01:8b:d9:61:28:cc:24:07:44:6c:8d:da:a1:6a:6b:
                    a0:04:4b:a2:ec:f9:11:f3:4d:a2:a2:7e:f3:d6:82:
                    00:09:5b:7d:47:47:05:0b:9a:36:bd:7b:ad:4a:4a:
                    45:d7:6d:6e:7e:b5:eb:1d:9e:22:87:81:89:95:60:
                    ff:b7:99:a8:64:37:ae:e9:23:59:f8:15:63:94:55:
                    6c:76:90:67:ef:d6:f7:9f:8b:7a:12:39:ad:c8:2e:
                    1e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7B:02:58:78:5B:87:6E:95:29:60:5F:2A:67:04:AA:3F:FD:C7:99:B0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/7B0258785B876E9529605F2A6704AA3FFDC799B0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.164.0/22
                IPv6:
                  2804:735c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270910

    Signature Algorithm: sha256WithRSAEncryption
         ae:8c:79:3c:ab:c4:08:56:10:59:3b:2a:0a:02:cb:be:17:f2:
         32:36:a7:de:fe:90:8d:cd:2c:25:70:f1:e3:52:b0:d8:c5:5c:
         d2:59:0f:d6:6c:1d:16:39:a5:43:fc:79:75:85:3e:52:b0:9a:
         10:eb:df:94:d5:34:82:9d:c5:ff:e9:b2:aa:7e:89:6c:6d:00:
         3e:14:02:38:6b:d8:97:81:f8:aa:c8:59:ee:b7:4d:18:52:79:
         82:be:71:4a:60:c9:2d:3f:b3:9b:23:59:ca:ca:79:01:45:98:
         1b:86:41:aa:c2:c3:25:37:27:00:7c:ff:8c:07:7d:68:d7:ad:
         c4:bd:1f:cd:ca:2a:13:fb:38:d9:4e:a3:df:14:a1:75:61:ff:
         5b:ed:36:bf:40:fa:8f:b9:4d:9b:50:7f:9a:f6:67:fb:22:94:
         b7:a0:17:d3:02:bb:89:0c:3b:9a:63:05:60:ca:9b:5c:d4:67:
         76:6e:28:b0:f6:fe:81:0f:49:84:b9:81:8a:e9:17:e9:5e:67:
         32:74:0b:5a:c2:f4:a1:e9:92:55:c9:71:78:21:5f:91:1b:bf:
         05:05:b8:58:74:34:0b:9b:a7:1e:3f:1b:fb:20:28:75:a9:15:
         cb:24:7f:c3:71:ee:54:e1:19:68:fc:da:ea:4b:15:29:6a:e8:
         d8:4f:1e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:23 2024 by rpki-client on console-fra.rpki-client.org